Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/924d3664-3d49-489b-a050-c16cb22f06bc.cer
File:                     924d3664-3d49-489b-a050-c16cb22f06bc.cer (raw, json)
Hash identifier:          9Lir7t9aygMJUrownjIGO119dX/A+JrWFkVWv/Ttzug=
Subject key identifier:   71:31:57:B3:EE:C2:99:00:26:C4:31:5D:70:3E:C7:16:3A:30:71:7A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858441052CAD7E95140A1971F6880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/924d3664-3d49-489b-a050-c16cb22f06bc/924d3664-3d49-489b-a050-c16cb22f06bc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/924d3664-3d49-489b-a050-c16cb22f06bc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 21:18:53 +0000
Certificate not after:    Wed 04 Mar 2026 21:18:53 +0000
Subordinate resources:    IP: 142.104.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:10:52:ca:d7:e9:51:40:a1:97:1f:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 30 21:18:53 2023 GMT
            Not After : Mar  4 21:18:53 2026 GMT
        Subject: CN=924d3664-3d49-489b-a050-c16cb22f06bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:00:8e:3f:d1:49:db:ad:5a:68:31:98:e7:
                    0d:86:d7:05:0c:e2:c2:ef:5d:d2:6a:07:a0:2a:2c:
                    ed:5b:1c:ba:07:4e:66:d6:7e:54:ed:d3:62:80:31:
                    28:4d:06:14:d1:b7:90:48:ac:31:9a:c6:58:f1:b9:
                    a4:45:14:c6:56:b4:e3:1a:a5:33:2d:3f:b8:05:d3:
                    80:47:ca:2a:bc:36:8b:bb:59:57:26:62:93:4e:cb:
                    76:8e:61:c5:2c:d0:39:b6:32:b0:b0:e0:4a:10:9b:
                    67:63:1c:a1:3e:f2:af:88:bc:6f:54:cf:c6:05:f9:
                    f1:13:0b:7d:1a:02:46:7c:d5:34:54:86:8e:da:fa:
                    ab:16:ae:ad:de:02:80:3e:76:89:7d:46:d5:53:70:
                    34:37:37:85:11:7b:4d:20:a2:e4:6a:c6:e6:d8:fa:
                    c3:f4:c7:bc:77:95:1a:33:9e:96:f7:33:ef:e7:86:
                    79:92:95:eb:03:74:db:f0:dd:d2:3d:3f:17:77:5f:
                    cc:c2:85:c9:05:70:e6:3d:7e:37:b9:ac:8f:7b:da:
                    55:3c:13:99:4e:f7:70:76:c2:ce:b8:df:73:53:d9:
                    4f:27:ed:9b:7f:bc:83:6d:07:9a:bf:41:2d:c1:ef:
                    84:2d:5e:ef:f0:7b:b4:fe:38:93:9f:6b:9b:2d:be:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:57:B3:EE:C2:99:00:26:C4:31:5D:70:3E:C7:16:3A:30:71:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/924d3664-3d49-489b-a050-c16cb22f06bc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/924d3664-3d49-489b-a050-c16cb22f06bc/924d3664-3d49-489b-a050-c16cb22f06bc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:fc:c3:d6:32:1f:74:48:bf:56:01:4f:4d:6e:3e:c0:2a:
         bc:f5:49:19:71:b3:37:5c:5d:88:80:73:3c:d0:65:8a:d4:10:
         96:5d:10:24:8b:f9:d2:df:c8:fe:81:2f:bc:e8:dc:b0:89:27:
         be:0f:e5:35:44:10:13:9a:76:7d:ad:9e:0f:ad:88:46:93:dc:
         b5:da:3b:36:3b:ed:60:ae:20:30:0d:f6:a0:04:23:d2:f5:56:
         0c:27:e4:09:50:43:f3:a0:f8:bd:18:3d:69:fd:6b:2c:5f:c8:
         4e:75:97:42:e5:6e:29:cd:62:c4:95:8e:d1:42:96:37:c6:2f:
         f4:8c:88:0a:60:51:40:d1:29:8c:b6:c0:29:d4:d4:5b:58:6e:
         95:43:df:a4:58:9e:ba:02:5a:ff:80:08:56:d3:91:36:9f:d2:
         e8:62:95:8e:b5:de:4a:28:e4:3e:2e:9a:d4:31:74:fc:bd:d2:
         4c:94:64:e0:d1:48:52:e1:a9:13:e2:61:59:43:39:58:9d:a3:
         52:03:d3:a8:be:e8:04:5d:0f:a8:6c:fe:26:75:31:6c:93:62:
         42:ac:37:a6:a5:6d:c5:26:d8:9d:15:cd:7b:c7:1a:bf:ab:28:
         3e:90:e0:cd:12:0a:d6:d8:c1:ff:13:fe:d9:90:7d:f4:59:06:
         20:01:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----